Sims Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sims Project records in CISA KEV

No Sims Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-15405 CVE-2022-34549 · GHSA-vgp3-2wc7-6gv5

MEDIUM 41

Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01435 Published 2022-07-27 No fix listed CWE-434

TI-2022-15407 CVE-2022-34551 · GHSA-8hmj-5292-j8w9

LOW 31

Sims v1.0 was discovered to allow path traversal when downloading attachments.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01077 Published 2022-07-27 No fix listed CWE-22